thr3ads.net - samba - [Samba] bind9 samba ac dc issue [Jan 2022]

If this information is useful, please help other people find it:
Share via:

Patrik

2022-Jan-24 12:02 UTC

[Samba] bind9 samba ac dc issue

hello!

how are you? wish you a good year!

i have a problem with the DNS. I get invalid IPv6 addresses.
When my dynamic IPv6 changes, it does not flush the old addresses.

smb config:
[global]

        bind interfaces only = yes
        interfaces = fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84%enp2s0/64
192.168.78.20
        netbios name = SERVER
        realm = P3X-DC.PATRIKX3.COM
        server services = -dns
        dns forwarder = 8.8.8.8
        workgroup = P3X-DC
        allow insecure wide links = Yes
        unix extensions = no
        server role = active directory domain controller
        idmap_ldb:use rfc2307 = yes
        comment         template shell = /bin/bash
        template homedir = /home/%U

When IPv6 changes:
sudo sh -c "rm /var/lib/samba/private/dns_update_cache || true &&
systemctl
reset-failed bind9 && service bind9 restart && samba_dnsupdate
--verbose &&
service bind9 restart

output:
{

   - status: "ok",
   - stdout:
   [
      - "IPs: ['fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84',
'192.168.78.20']",
      - "need cache add: A server.p3x-dc.patrikx3.com 192.168.78.20",
      - "Looking for DNS entry A server.p3x-dc.patrikx3.com 192.168.78.20
      as server.p3x-dc.patrikx3.com.",
      - "need cache add: AAAA server.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84",
      - "Looking for DNS entry AAAA server.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 as server.p3x-dc.patrikx3.com.",
      - "need cache add: NS p3x-dc.patrikx3.com
server.p3x-dc.patrikx3.com",
      - "Looking for DNS entry NS p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com as p3x-dc.patrikx3.com.",
      - "need cache add: NS _msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com",
      - "Looking for DNS entry NS _msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com as _msdcs.p3x-dc.patrikx3.com.",
      - "need cache add: A p3x-dc.patrikx3.com 192.168.78.20",
      - "Looking for DNS entry A p3x-dc.patrikx3.com 192.168.78.20 as
      p3x-dc.patrikx3.com.",
      - "need cache add: AAAA p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84",
      - "Looking for DNS entry AAAA p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 as p3x-dc.patrikx3.com.",
      - "need cache add: SRV _ldap._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV _ldap._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 as _ldap._tcp.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV _ldap._
      tcp.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389",
      - "need cache add: SRV _ldap._tcp.dc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV _ldap._tcp.dc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 as _ldap._tcp.dc._
      msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.dc._msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389",
      - "need cache add: SRV
      _ldap._tcp.c99eac56-8f14-409a-adff-14a0ae261ab0.domains._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV
      _ldap._tcp.c99eac56-8f14-409a-adff-14a0ae261ab0.domains._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389 as
      _ldap._tcp.c99eac56-8f14-409a-adff-14a0ae261ab0.domains._
      msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.c99eac56-8f14-409a-adff-14a0ae261ab0.domains._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389",
      - "need cache add: SRV _kerberos._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88",
      - "Looking for DNS entry SRV _kerberos._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88 as
_kerberos._tcp.p3x-dc.patrikx3.com.",
      - "Checking 0 100 88 server.p3x-dc.patrikx3.com. against SRV
      _kerberos._tcp.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88",
      - "need cache add: SRV _kerberos._udp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88",
      - "Looking for DNS entry SRV _kerberos._udp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88 as
_kerberos._udp.p3x-dc.patrikx3.com.",
      - "Checking 0 100 88 server.p3x-dc.patrikx3.com. against SRV
      _kerberos._udp.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88",
      - "need cache add: SRV _kerberos._tcp.dc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88",
      - "Looking for DNS entry SRV _kerberos._tcp.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88 as
      _kerberos._tcp.dc._msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 88 server.p3x-dc.patrikx3.com. against SRV
      _kerberos._tcp.dc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88",
      - "need cache add: SRV _kpasswd._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 464",
      - "Looking for DNS entry SRV _kpasswd._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 464 as
_kpasswd._tcp.p3x-dc.patrikx3.com.",
      - "Checking 0 100 464 server.p3x-dc.patrikx3.com. against SRV
      _kpasswd._tcp.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 464",
      - "need cache add: SRV _kpasswd._udp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 464",
      - "Looking for DNS entry SRV _kpasswd._udp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 464 as
_kpasswd._udp.p3x-dc.patrikx3.com.",
      - "Checking 0 100 464 server.p3x-dc.patrikx3.com. against SRV
      _kpasswd._udp.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 464",
      - "need cache add: CNAME 3257a481-dada-4ad1-819a-b0465a804d1f._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com",
      - "Looking for DNS entry CNAME 3257a481-dada-4ad1-819a-b0465a804d1f._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com as
      3257a481-dada-4ad1-819a-b0465a804d1f._msdcs.p3x-dc.patrikx3.com.",
      - "need cache add: SRV _ldap._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389 as
      _ldap._tcp.Default-First-Site-Name._sites.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.Default-First-Site-Name._sites.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389",
      - "need cache add: SRV _ldap._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV
      _ldap._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389 as
      _ldap._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389",
      - "need cache add: SRV _kerberos._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88",
      - "Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88 as
      _kerberos._tcp.Default-First-Site-Name._sites.p3x-dc.patrikx3.com.",
      - "Checking 0 100 88 server.p3x-dc.patrikx3.com. against SRV
      _kerberos._tcp.Default-First-Site-Name._sites.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88",
      - "need cache add: SRV
      _kerberos._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88",
      - "Looking for DNS entry SRV
      _kerberos._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88 as
      _kerberos._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 88 server.p3x-dc.patrikx3.com. against SRV
      _kerberos._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88",
      - "need cache add: SRV _ldap._tcp.pdc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV
_ldap._tcp.pdc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 as _ldap._tcp.pdc._
      msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.pdc._msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389",
      - "need cache add: A gc._msdcs.p3x-dc.patrikx3.com
192.168.78.20",
      - "Looking for DNS entry A gc._msdcs.p3x-dc.patrikx3.com
      192.168.78.20 as gc._msdcs.p3x-dc.patrikx3.com.",
      - "need cache add: AAAA gc._msdcs.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84",
      - "Looking for DNS entry AAAA gc._msdcs.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 as gc._msdcs.p3x-dc.patrikx3.com
      .",
      - "need cache add: SRV _gc._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 3268",
      - "Looking for DNS entry SRV _gc._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 3268 as _gc._tcp.p3x-dc.patrikx3.com.",
      - "Checking 0 100 3268 server.p3x-dc.patrikx3.com. against SRV _gc._
      tcp.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268",
      - "need cache add: SRV _ldap._tcp.gc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 3268",
      - "Looking for DNS entry SRV _ldap._tcp.gc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 3268 as _ldap._tcp.gc._
      msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 3268 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.gc._msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      3268",
      - "need cache add: SRV _gc._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268",
      - "Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268 as
      _gc._tcp.Default-First-Site-Name._sites.p3x-dc.patrikx3.com.",
      - "Checking 0 100 3268 server.p3x-dc.patrikx3.com. against SRV
      _gc._tcp.Default-First-Site-Name._sites.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 3268",
      - "need cache add: SRV _ldap._tcp.Default-First-Site-Name._sites.gc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268",
      - "Looking for DNS entry SRV
      _ldap._tcp.Default-First-Site-Name._sites.gc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268 as
      _ldap._tcp.Default-First-Site-Name._sites.gc._
      msdcs.p3x-dc.patrikx3.com.",
      - "Checking 0 100 3268 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.Default-First-Site-Name._sites.gc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268",
      - "need cache add: A DomainDnsZones.p3x-dc.patrikx3.com
192.168.78.20"
      ,
      - "Looking for DNS entry A DomainDnsZones.p3x-dc.patrikx3.com
      192.168.78.20 as DomainDnsZones.p3x-dc.patrikx3.com.",
      - "need cache add: AAAA DomainDnsZones.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84",
      - "Looking for DNS entry AAAA DomainDnsZones.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 as
      DomainDnsZones.p3x-dc.patrikx3.com.",
      - "need cache add: SRV _ldap._tcp.DomainDnsZones.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV _ldap._
      tcp.DomainDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389
      as _ldap._tcp.DomainDnsZones.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV _ldap._
      tcp.DomainDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
389"
      ,
      - "need cache add: SRV _ldap._tcp.Default-First-Site-Name._
      sites.DomainDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389",
      - "Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._
      sites.DomainDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389 as _ldap._tcp.Default-First-Site-Name._
      sites.DomainDnsZones.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.Default-First-Site-Name._
      sites.DomainDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389",
      - "need cache add: A ForestDnsZones.p3x-dc.patrikx3.com
192.168.78.20"
      ,
      - "Looking for DNS entry A ForestDnsZones.p3x-dc.patrikx3.com
      192.168.78.20 as ForestDnsZones.p3x-dc.patrikx3.com.",
      - "need cache add: AAAA ForestDnsZones.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84",
      - "Looking for DNS entry AAAA ForestDnsZones.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 as
      ForestDnsZones.p3x-dc.patrikx3.com.",
      - "need cache add: SRV _ldap._tcp.ForestDnsZones.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389",
      - "Looking for DNS entry SRV _ldap._
      tcp.ForestDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389
      as _ldap._tcp.ForestDnsZones.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV _ldap._
      tcp.ForestDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
389"
      ,
      - "need cache add: SRV _ldap._tcp.Default-First-Site-Name._
      sites.ForestDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389",
      - "Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._
      sites.ForestDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389 as _ldap._tcp.Default-First-Site-Name._
      sites.ForestDnsZones.p3x-dc.patrikx3.com.",
      - "Checking 0 100 389 server.p3x-dc.patrikx3.com. against SRV
      _ldap._tcp.Default-First-Site-Name._
      sites.ForestDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389",
      - "0 DNS updates and 0 DNS deletes needed",
      - "Rebuilding cache at /var/lib/samba/private/dns_update_cache",
      - "Adding A server.p3x-dc.patrikx3.com 192.168.78.20 to
      dns_update_cache",
      - "Adding AAAA server.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 to dns_update_cache",
      - "Adding NS p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com to
      dns_update_cache",
      - "Adding NS _msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com to
      dns_update_cache",
      - "Adding A p3x-dc.patrikx3.com 192.168.78.20 to
dns_update_cache",
      - "Adding AAAA p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 to dns_update_cache",
      - "Adding SRV _ldap._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 to dns_update_cache",
      - "Adding SRV _ldap._tcp.dc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 to dns_update_cache",
      - "Adding SRV
      _ldap._tcp.c99eac56-8f14-409a-adff-14a0ae261ab0.domains._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389 to
      dns_update_cache",
      - "Adding SRV _kerberos._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88 to dns_update_cache",
      - "Adding SRV _kerberos._udp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88 to dns_update_cache",
      - "Adding SRV _kerberos._tcp.dc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 88 to dns_update_cache",
      - "Adding SRV _kpasswd._tcp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 464 to dns_update_cache",
      - "Adding SRV _kpasswd._udp.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 464 to dns_update_cache",
      - "Adding CNAME 3257a481-dada-4ad1-819a-b0465a804d1f._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com to
      dns_update_cache",
      - "Adding SRV _ldap._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389 to
      dns_update_cache",
      - "Adding SRV _ldap._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 389 to
      dns_update_cache",
      - "Adding SRV _kerberos._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88 to
      dns_update_cache",
      - "Adding SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 88 to
      dns_update_cache",
      - "Adding SRV _ldap._tcp.pdc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 to dns_update_cache",
      - "Adding A gc._msdcs.p3x-dc.patrikx3.com 192.168.78.20 to
      dns_update_cache",
      - "Adding AAAA gc._msdcs.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 to dns_update_cache",
      - "Adding SRV _gc._tcp.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      3268 to dns_update_cache",
      - "Adding SRV _ldap._tcp.gc._msdcs.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 3268 to dns_update_cache",
      - "Adding SRV _gc._tcp.Default-First-Site-Name._
      sites.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268 to
      dns_update_cache",
      - "Adding SRV _ldap._tcp.Default-First-Site-Name._sites.gc._
      msdcs.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com 3268 to
      dns_update_cache",
      - "Adding A DomainDnsZones.p3x-dc.patrikx3.com 192.168.78.20 to
      dns_update_cache",
      - "Adding AAAA DomainDnsZones.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 to dns_update_cache",
      - "Adding SRV _ldap._tcp.DomainDnsZones.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 to dns_update_cache",
      - "Adding SRV _ldap._tcp.Default-First-Site-Name._
      sites.DomainDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389 to dns_update_cache",
      - "Adding A ForestDnsZones.p3x-dc.patrikx3.com 192.168.78.20 to
      dns_update_cache",
      - "Adding AAAA ForestDnsZones.p3x-dc.patrikx3.com
      fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84 to dns_update_cache",
      - "Adding SRV _ldap._tcp.ForestDnsZones.p3x-dc.patrikx3.com
      server.p3x-dc.patrikx3.com 389 to dns_update_cache",
      - "Adding SRV _ldap._tcp.Default-First-Site-Name._
      sites.ForestDnsZones.p3x-dc.patrikx3.com server.p3x-dc.patrikx3.com
      389 to dns_update_cache",
      - ""
      ],
   - stderr:
   [
      - ""
      ]

}

all looks good, but the dig is wrong:
root at server:~# dig p3x-dc.patrikx3.com AAAA

; <<>> DiG 9.17.21-1-Debian <<>> p3x-dc.patrikx3.com
AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18797
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 23, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: f53ae63e0232cea40100000061ee94c644a8878eeae1349c (good)
;; QUESTION SECTION:
;p3x-dc.patrikx3.com. IN AAAA

;; ANSWER SECTION:
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:c9:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:7e3::20
p3x-dc.patrikx3.com. 900 IN AAAA fddb:e653:c87e::20
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:5fd:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:6ec4:eeaa:a0ff:fe1b:4d84
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:6252:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:2c15:eeaa:a0ff:fe1b:4d84
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:61f1:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA ::1
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:49bc:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:2790:eeaa:a0ff:fe1b:4d84
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:75d:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:52f:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:605c:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:6246:eeaa:a0ff:fe1b:4d84
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:6e0e:eeaa:a0ff:fe1b:4d84
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:7e3:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:95c:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:2c1a:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:4972:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:2312:21b:21ff:fea6:ce93
p3x-dc.patrikx3.com. 900 IN AAAA 2a01:36d:200:640a:eeaa:a0ff:fe1b:4d84

;; Query time: 0 msec
;; SERVER: 192.168.78.20#53(192.168.78.20) (UDP)
;; WHEN: Mon Jan 24 13:00:06 CET 2022
;; MSG SIZE  rcvd: 720


*this makes the login slow. how can i purge the old records? *

*thanks, if you could tell some pointers. thanks.*

*Patrik*
WWW <https://patrikx3.com> | GitHub <https://github.com/patrikx3/> |
NPM
<https://www.npmjs.com/~patrikx3> | Corifeus <https://corifeus.com>
| +36
20 342 8046

Rowland Penny

2022-Jan-24 13:39 UTC

head link

[Samba] bind9 samba ac dc issue

On Mon, 2022-01-24 at 13:02 +0100, Patrik via samba
wrote:> hello!
> 
> how are you? wish you a good year!
> 
> i have a problem with the DNS. I get invalid IPv6 addresses.
> When my dynamic IPv6 changes, it does not flush the old addresses.
> 
> smb config:
> [global]
> 
>         bind interfaces only = yes
>         interfaces = fd00:ffff:1978:0:eeaa:a0ff:fe1b:4d84%enp2s0/64
> 192.168.78.20
>         netbios name = SERVER
>         realm = P3X-DC.PATRIKX3.COM
>         server services = -dns
>         dns forwarder = 8.8.8.8
You do not need the dns forwarder line if using Bind9
>         workgroup = P3X-DC
>         allow insecure wide links = Yes
>         unix extensions = no
Why have you set those two lines ?
>         server role = active directory domain controller
>         idmap_ldb:use rfc2307 = yes
>         comment Again, why have you set that line ?
Not that any of the above has anything to do with your problem.

>         template shell = /bin/bash
>         template homedir = /home/%U
> 
> When IPv6 changes:
> sudo sh -c "rm /var/lib/samba/private/dns_update_cache || true
&&
> systemctl
> reset-failed bind9 && service bind9 restart &&
samba_dnsupdate --
> verbose &&
> service bind9 restart
Is there some reason why you are using IPv6 internally ?
However using it is your decision.
> 
> 
> 
> *this makes the login slow. how can i purge the old records? *
You can remove them with samba-tool.
What is more important is how they are being created in the first
place.

It will probably help if you could post your Bind9 conf files,
named.conf etc.

Rowland

samba - Jan 2022 - bind9 samba ac dc issue

[Samba] bind9 samba ac dc issue

[Samba] bind9 samba ac dc issue